ANS-C01 Network Management and Operations Practice Question
A company has a Direct Connect connection with a private VIF to a VPC. The network engineer needs to ensure that traffic from the on-premises network to the VPC uses the Direct Connect path, while internet-bound traffic from the VPC uses an Internet Gateway. Which TWO configurations are required? (Select TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add a route in the VPC route table for the on-premises CIDR pointing to the virtual private gateway (VGW)
Options D and E are correct. Option D adds a route in the VPC route table for the on-premises CIDR pointing to the virtual private gateway (VGW), which ensures traffic destined for the on-premises network uses the Direct Connect private VIF. Option E adds a default route (0.0.0.0/0) in the VPC route table pointing to the Internet Gateway, which directs all internet-bound traffic from the VPC to the IGW. Option A is incorrect because the Direct Connect location prefix is not a destination in the VPC; the route needed is for the on-premises CIDR. Option B is incorrect because a NAT Gateway is not required for internet access when using an Internet Gateway; the IGW itself provides outbound internet access. Option C is incorrect because the on-premises router should not send internet traffic to the VPC; that would defeat the purpose of using Direct Connect for on-premises-to-VPC traffic only.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add a route in the VPC route table for the Direct Connect location prefix
Why it's wrong here
Not necessary; the VGW handles the connection.
- ✗
Deploy a NAT Gateway in the VPC for internet access
Why it's wrong here
NAT Gateway is for private subnets; not required here.
- ✗
Configure the on-premises router to send all internet traffic to the VPC
Why it's wrong here
Internet traffic from on-premises should not go to VPC.
- ✓
Add a route in the VPC route table for the on-premises CIDR pointing to the virtual private gateway (VGW)
Why this is correct
Directs traffic from VPC to on-premises via Direct Connect.
- ✓
Add a default route (0.0.0.0/0) in the VPC route table pointing to the Internet Gateway
Why this is correct
Directs internet-bound traffic to the Internet Gateway.
Visual reference
Go deeper
Related to this question
About these practice questions
This ANS-C01 question is part of Courseiva's 1,621-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.